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DETAILED ACTION 

1 . This action is responsive to Amendments dated January 29, 2009 in 
responding to tlie Office Action of October 29, 2008 provided in the rejection of 
all pending claims 1,2, 4-12, and 15-21. 

Claims 1, 2, 4, 6, 7, 11, 14, 16, 17, and 19 have been amended. 
No new claims have been added. 

Accordingly, claims 1, 2, 4-12, and 15-21 are pending and presented for 
the examination. 

Claim Objections 

2. Claims 1 , 2, and 4-8 are objected to because of the following informalities: 
As to claim 1 , lines 7-8, discloses "a customer by the client update 

process" should be changed to - "a customer" - .Appropriate correction is 
required. Accordingly, claims 2 and 4-8 are also objected for being depended 
upon the objection of the base claim 1 . 
As to claim 9, 

(line 2), discloses, "the c//er?f database" should be changed to -the 
customer database--. Appropriate correction is required. 

(line 6), discloses, "the customer access information" should be changed 
to -customer access information--. Appropriate correction is required. 

Claim Rejections - 35 USC § 101 

3. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, macliine, manufacture, or composition 
of matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 
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4. Claim 9 is rejected under 35 U.S.C. 101 because tine claimed invention is 
directed to non-statutory subject matter. 

As claim 1 , recites, "A software distribution system comprising: a 
customer database. ...an update server process. ..an update client process... ", 
does not comprise a readable medium or hardware component (no physical 
transformation) in order to realize the functionality of the system . The "system" 
without such computer readable storage medium or hardware component may 
be broadly interpreted as data structures representing descriptive material per 
ser or computer programming representing computer listing per ser - functional 
descriptive material under 35 USC § 101 . See MPEP 2106.01(1). 

Prior Art's Arguments - Rejections 

5. Applicants' arguments filed on January 29, 2009 , especially page 1 0 of 
Remarks, paragraph 2, within the independent claim 1 limitation "sending of an 
update request, by a client update process to a supplier controlled process, 
based upon the results of an inventor of hardware and software of a customer 
network" have been fully considered and are persuasive; however, after further 
consideration, a new rejection is being applied with a combination of Hellerstein 
et al (US 2002/0129356 A1 of record) in view of Moshir et al.(US 2002/0100036 
A1 made of record) hereon as further address in the Claims Rejections set forth 
bellow. 

Claim Rejections - 35 USC § 103 

6. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 102 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

7. Claims 1 , 2, 4, 6, 7, 1 1 , 1 2, 1 4, 1 6, 1 7, and 1 9 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Hellerstein et al (US 2002/0129356 A1 
of record - hereinafter Hellerstein ) in view of Moshir et al., (US 2002/0100036 Al 
made of record - hereinafter Moshir). 

As per claims 1,11, and 19, Hellerstein discloses a method for managing 
software updates in a network data processing system, the method comprising: 

identifying an update for an application for distribution to customers from a 
supplier - (e.g. new software packages (SP) are stored in a global software 
repository 206 for distribution (Fig. 2) - See at least [0056] and [0038] with 
emptiasis added); 

sending an update list (basic packages from new packages SP ) to a client 
update process (region servers) , wherein the update list identifies the update - 
(e.g. the service distribution server SDS 205 extracting the SP pacl<ages from 
206 and distribute to the regions servers 203 - See at least [0057], [0038], and 
[0052] with emphasis added); 

responsive to receiving the update list by the client update process - [e.g., 
the region server 203 receive the basic packages and its descriptions such as 
service, role, software name, version, resource pre-requisite list, server pre- 
requisite list (update list)), obtaining an inventory (rule repository 204 (Fig. 2) )of 
hardware and software of a customer network owned by a customer by the client 
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update process, wherein the customer networl< (regions/ domain) comprises a 
plurality of nodes (targets 202) - (e.g. after receiving the basic packages and its 
descriptions , the region servers 203 of Fig. 2 retrieve (obtains) the target 
machines' configuration (l-IW and/or software) from a role repository 204 so that 
the customized package can be produced- See at least [0057], [0032], and 
[0053] with emphasis added) ; 

distributing the update through the supplier controlled process to the client 
update process based on customer access information (e.g. the policy repository 
209 (Fig. 2)) and the update request— ^e.g. the service distribution server SDS 
205 extracting the SP packages from 206 and distribute to the regions servers 
203 based on 209 policy ensure the potential accessible regions server- See at 
least [0057], [0038], and [0052] with emphasis added); 

receiving the update at the client update process(e.gf., software packages 
are received at region server 203 (fig. 2) - see at least [0059J); and 

distributing the update to the plurality of nodes in the customer network 
using the client update process (e.g., region server 203 distribute the package to 
a target 202 - see at least H [0059]-[0062]). 

It is to note that Hellerstein discloses client update process (Regions 
Server 203) perform inventory scans to the target machines 202 (nodes)'s 
configuration for customize (determine) the base package for each of the target 
machines - See at least [0053], [0059-0061], and [0052] with emphasis added. 

However, Hellerstein does not explicitly discloses determining, by the 
client update process(Regions Server 203), whether to request the update 
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(customized pacl^ages source) from a supplier controlled process (SDS 205) 
based on the inventory {target machines' configuration in role repository 204 (fig. 
2) ) and if so, sending an update request by the client update process to the 
supplier controlled process (SDS 205) to request the update; But, Moshir, in 
analogous art, teaches " The present invention relates to systems and methods 
which update existing software across a remote network. The invention relates 
more specifically to checking for the need for updating and then updating the 
software as required across a client-server system without the need for human 
oversight, and without requiring that a target network administrative machine 
keep copies of software patches. ...In operation, the update agent 204 (region 
server 203) of target 1202 checks its update list 224(basic packages and its 
description) at the onsite or offsite update date server 220 (storage of the basic 
packages at the Region Serverl ...n) to see if a new package should be installed. 
If one is there , the update agent 204 checks to see if the package is already in 
memory on the update server 220. If so, the update agent 204 attempts to install 
the software patch directly from the update servers 220 . If not, the update agent 
204 (Regions Server 203) attempts to install the software patch (customize 
package) directly from the package computer location 232 . In some instances, 
this is successful, in which case the update list 224 is updated. ..In other cases, a 
download 218 will be obstructed by the firewall 214 . If this happens, the update 
agent 210 (region server 203) informs the update server 220 (SDS 205) and 
then the update server 220 itself will attempt to retrieve the package and place it 
in memory 228. From that memory on the update server, the software is 
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installed directly to the target machine." - See Moshir, at least [0027-0028], 
[0003], and Fig. 2 with empliasis added. 

Thus, it would have been obvious to one ordinary skill in the art at the time 
invention was made to use the retrieving (requesting) of software patch from the 
update server of Moshir in automated distribution of a software packages in the 
regions network (e.g. the regions server 203) of Hellerstein for increasing 
extensibility storing the customized package source (update) as taught in Moshir 
(e.g. [0027-0028]). 

Further regarding to claim 11, Hellerstein discloses a data processing 
system (e.g., computer system- See at least [0083]) for implementing method 
as of claim 1 above. 

Further regarding to claim 19, Hellerstein discloses a computer 
recordable medium (e.g., flash memory -see at least ^ [0083]: 9-11) encoded 
with a computer program product that is operable for implementing the method 
as of claim 1 above. 

As per claims 2 and 12, modified Hellerstein with Moshir discloses, 
wherein both of the distributing steps are implemented using a pull mechanism 
where the client update process sends a request for a new update list to the 
suppliers controlled process based on a defined schedule - (e.g. update agent 
such as 204 (fig. 2) is capable of operation without human/administrator such as 
how to contact the update server to retrieve a list of task (new update) and how 
to execute those task within time frame - See Moshir at least [0055 -0056], and 
[0109] with emphasis added). 
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As per claims 4 and 14, modified Hellerstein with Moshir discloses 

wherein the customer access informationfe.g., repository 209 (Fig. 2) - See 
Mosliir at least [0052]) includes licensing information for the customer, wherein 
the licensing information for the customer, wherein the licensing information 
includes what applications the customer is able to update as well as how many 
updates may be distributed for a given application of the applications, and 
wherein the licensing information is used by the supplier controlled process in 
determining whether to distribute the update to the client update process - (e.g. 
patch host has given permission to the target owner (customer) will the 
downloader be allowed to download the new patch. The permission comprises a 
purchase agreement, a lease agreement (licenses) and an evaluation agreement 

- Moshir at least [0100] with emphasis added). 

As per claims 6 and 16, modified Hellerstein with Moshir discloses 
wherein the identifying step and the distributing the update through the supplier 
controlled process step are implemented in a live update server, wherein the live 
update server receives a request for the update list from the client update 
process - (e.g., server provide wait time in response to the update agent request 

- see Moshir at least [0109-0110] with emphasis added). 

As per claims 7 and 17, modified Hellerstein with Moshir discloses 
wherein the update list (e.g., (basic packages from new packages SP ) sent to 
the client update process includes prerequisite information for the update -(e.g. 
basis package from new packages SP is being sent from SDS 205 to Region 
Server 203 based on the pre-requisite - See Hellerstein, at least [0052] with 
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emphasis added), and wherein the client update process uses both the 
prerequisite information and the inventory in determining what to request with the 
update request that is sent by the client update process to the supplier controlled 
process - {e.g. Region Server 203 use both the dependency region information 
524 and the individual machine configuration information 526 in distributing the 
customized package for individual machine 530 - See Hellerstein at least [0053] 
with emphasis added) . 

8. Claims 5, 8-1 0, 1 5, 1 8, and 20 are rejected under 35 U.S.C. 1 03(a) as 
being unpatentable over Hellerstein et al (US 2002/0129356 A1) in view of 
Moshir et al. (US 2002/0100036 Al), and in further view of Carroll et al., (U.S. 
Patent No. 6,859,699 B2 of record - hereinafter Carroll ). 

As per claims 5 and 15, modified Hellerstein with Moshir does not 
explicitly disclose wherein the distributing the update through the supplier 
controlled process step includes: denying a request for the application from the 
customer when the customer access information indicates that the customer is 
an unauthorized customer of the application. However, Carroll, in an analogous 
art, teaches a remote service provider maintain a database of the data. The 
database is update frequently. The remoter service provider maintains a web site 
for authorized users ID and password to access the data. Authorized users can 
access and download desired data by connecting to the remote service provider 
via the data transmission network. Certain approaches are used to verify' s and 
deny' s users identity including license/activation code -See Carroll, at least 
Abstract and Fig. 3a, Buy a license 35 and associated text with emphasis added. 
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It would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to have modified the policy repository 209 of the 
modified Hellerstein with Moshir in the teaching distribution data with 
authorization of Carroll as a convenient way for the service distribution server 
205 to provide an interactive way in control and distribute the latest update 
software to regions server 203 (clients) as taught in Carroll (e.g., at least. 
Abstract 14-20 and at least col.6: 55-65). 

As per claims 8 and 18, modified Hellerstein with Moshir does not 
explicitly disclose wherein the update is only distributed to certain ones of the 
plurality of nodes using the client update process if the certain ones of the 
plurality of nodes trust the client update process to execute commands on behalf 
of the certain ones of the plurality of nodes to distribute the update to the certain 
ones of the plurality of nodes. However, Carroll, in an analogous art, teaches a 
remote service provider maintain a database of the data. The database is update 
frequently. The remoter service provider maintains a web site for authorized 
users ID and password to access the data. Authorized users can access and 
download desired data by connecting to the remote service provider via the data 
transmission network. Certain approaches are used to verify' s and deny' s users 
identity including license/activation code (see Carroll, Abstract and Fig. 3a, Buy a 
license 35 and associated text). 

It would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to have modified the policy repository 209 of the 
modified Hellerstein with Moshir in the teaching distribution data with 
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authorization of Carroll as a convenient way for the service distribution server 
205 to provide an interactive way in control and distribute the latest update 
software to regions server 203 (clients) as taught in Carroll (e.g., at least. 
Abstract 14-20 and at least col.6: 55-65). 

As to claim 9, Hellerstein discloses a software distribution system (e.g., 
computer system- See at least [0083]) comprising: 

a customer database, wherein the client data base stores customer 
access Information used to identify what software updates are authorized for 
particular customers(e.gf., a policy repository 209 - see at least ^ [0048]-[0050]); 

an update server process, wherein the update server process, controlled 
by a software organlzatlonfe.g., the sen/ice distribution server 205 distribution the 
new software/service to the regions server 203 - see at least, 205 & 203 , Fig. 2, 
^[0037], [0038], step 601 (Fig. 6) and [0056]), obtain an inventory of a customer 
network comprising a plurality of nodes owned by a customer, updates the 
customer access Information for the customer using the lnventory(e.g., software 
package should only occur in certain time or regions 1 should not get any update 
because of non-payment - see at least H [0048] and [0063]), and distributes the 
software updates to customers based on the customer access information and 
prerequisite information(e.g., dependency information: pre-requisite, co-requisite 
- see at least ^ [0041]) for Installing the software update (e.g., region server 203 
distribute the package to a target 202 - see at least H [0059]-[0062]); and 

an update client process, wherein the client update process (1) receives 
an update list from the update server process that identifies a software update - 
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(e.g., the service distribution server 205 distribution the new 
software/service(basis to the regions server 203 for those that match the regions 
server 203 profiles - ate least step 602 (Fig. 6) and [0057]), 

It is to note that Hellerstein discloses client update process (Regions 
Server 203) perform inventory scans to the target machines 202 (nodes)'s 
configuration for customize (determine) the base package for each of the target 
machines - See at least [0053], [0059-0061], and [0052] with emphasis added. 

However, Hellerstein does not explicitly discloses the client update 
process (Regions Server 203) (ii) determines whether to request the software 
update (customized packages source) from the update server process (SDS 
205)based on the inventory(fargef machines' configuration in role repository 204 
(fig. 2) ) and if so (ill) obtains the software update from the update server 
process for an authorized application and updates the plurality of nodes in the 
customer network, wherein the update server process obtains the inventory from 
the update client process. 

But, Moshir, in analogous art, teaches " The present invention relates to 
systems and methods which update existing software across a remote network. 
The invention relates more specifically to checking for the need for updating and 
then updating the software as reouired across a client-server system without the 
need for human oversight, and without requiring that a target network 
administrative machine keep copies of software patches....ln operation, the 
update agent 204 (region server 203) of target 1202 checks its update list 
224(basic packages and its description) at the onsite or offsite update date 
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server 220 (storage of the basic pacl^ages at the Region Serverl ...n) to see if a 
new package should be installed. If one is there , the update agent 204 checks to 
see if the package is already in memory on the update server 220. If so, the 
update agent 204 attempts to install the software patch directly from the update 
servers 220 . If not, the update agent 204 (Regions Server 203) attempts to install 
the software patch (customize package) directly from the package computer 
location 232 . In some instances, this is successful, in which case the update list 
224 is updated. ..In other cases, a download 218 will be obstructed by the firewall 
214 . If this happens, the update agent 210 (region server 203) informs the 
update server 220 (SDS 205) and then the update server 220 itself will attempt 
to retrieve the package and place it in memory 228. From that memory on the 
update server, the software is installed directly to the target machine." - See 
Moshir, at least [0027-0028], [0003], and Fig. 2 with empliasis added. 

Thus, it would have been obvious to one ordinary skill in the art at the time 
invention was made to use the retrieving (requesting) of software patch from the 
update server of Moshir in automated distribution of a software packages in the 
regions network (e.g. the regions server 203) of Hellerstein for increasing 
extensibility storing the customized package source (update) as taught in Moshir 
(e.g. [0027-0028]). 

it is noted that modified Hellerstein with Moshir does not explicitly disclose 
wherein the update is only distributed to certain ones of the plurality of nodes 
using the client update process if the certain ones of the plurality of nodes trust 
the client update process to execute commands on behalf of the certain ones of 
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the plurality of nodes to distribute the update to the certain ones of the plurality of 
nodes. However, Carroll, in an analogous art, teaches a remote service provider 
maintain a database of the data. The database is update frequently. The remoter 
service provider maintains a web site for authorized users ID and password to 
access the data. Authorized users can access and download desired data by 
connecting to the remote service provider via the data transmission network. 
Certain approaches are used to verify' s and deny' s users identity including 
license/activation code (see Carroll, Abstract and Fig. 3a, Buy a license 35 and 
associated text). 

It would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to have modified the policy repository 209 of the 
modified Hellerstein with Moshir in the teaching distribution data with 
authorization of Carroll as a convenient way for the service distribution server 
205 to provide an interactive way in control and distribute the latest update 
software to regions server 203 (clients) as taught in Carroll (e.g., at least. 
Abstract 14-20 and at least col. 6: 55-65). 

As to claim 10, Hellerstein discloses a data processing system (e.g., 
computer system- See at least [0083]) for implementing the method as of claim 1 
above. 

It is to note that modified Hellerstein does not explicitly disclose wherein 
the distribute the update through the supplier controlled process includes denying 
a request for the application from the customer when the customer access 
information indicates that the customer is an un authorized customer of the 
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application. However, Carroll, in an analogous art, teaches a remote service 
provider maintain a database of the data. The database is update frequently. The 
remoter service provider maintains a web site for authorized users ID and 
password to access the data. Authorized users can access and download 
desired data by connecting to the remote service provider via the data 
transmission network. Certain approaches are used to verify' s and deny' s users 
identity including license/activation code (see Carroll, Abstract and Fig. 3a, Buy a 
license 35 and associated text, with emphasis added). 

It would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to have modified the policy repository 209 of the 
modified Hellerstein with Moshir in the teaching distribution data with 
authorization of Carroll as a convenient way for the service distribution server 
205 to provide an interactive way in control and distribute the latest update 
software to regions server 203 (clients) as taught in Carroll {e.g., at least. 
Abstract 14-20 and at least col. 6: 55-65). 

As of claim 20, modified Hellerstein with Moshir discloses wherein the 
customer access information fe.gf., repository 209 (Fig. 2) - See Moshir at least 
[0052]) includes an inventory of software on the customer network and licensing 
information for the customer, wherein the licensing information includes what 
applications the customer is able to update as well as how many updates may be 
distributed for a given application of the applications- (e.g. patch host has given 
permission to the target owner (customer) will the downloader be allowed to 
download the new patch. The permission comprises a purchase agreement, a 
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lease agreement (licenses) and an evaluation agreement - Moshir at least [0100] 
with emphasis added). 

However, modified Hellerstein with Moshir does not explicitly disclose 
wherein the update is only distributed to certain ones of the plurality of nodes 
using the client update process if the certain ones of the plurality of nodes trust 
the client update process to execute commands on behalf of the certain ones of 
the plurality of nodes to distribute the update to the certain ones of the plurality of 
nodes. However, Carroll, in an analogous art, teaches a remote service provider 
maintain a database of the data. The database is update frequently. The remoter 
service provider maintains a web site for authorized users ID and password to 
access the data. Authorized users can access and download desired data by 
connecting to the remote service provider via the data transmission network. 
Certain approaches are used to verify' s and deny' s users identity including 
license/activation code (see Carroll, Abstract and Fig. 3a, Buy a license 35 and 
associated text). 

It would have been obvious to a person having ordinary skill in the art at 
the time the invention was made to have modified the policy repository 209 of the 
modified Hellerstein with Moshir in the teaching distribution data with 
authorization of Carroll as a convenient way for the service distribution server 
205 to provide an interactive way in control and distribute the latest update 
software to regions server 203 (clients) as taught in Carroll (e.g., at least. 
Abstract 14-20 and at least col. 6: 55-65). 



Application/Control Number: 10/677,658 Page 
Art Unit: 2192 

As to claim 21, modified Hellerstein witli Mosliir and Carroll further 
discloses wherein the distributing the update through the supplier controlled 
process step includes: denying a request for the application from the customer 
when the customer access information indicates that the customer is an 
unauthorized customer of the application {see Carroll at least col. 7: 54-59 and 
col. 9: 21-26). 

Conclusion 

9. The prior art made of record and not relied upon is considered pertinent to 
application disclosure. 

1 0. Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Marina Lee whose telephone number is 
(571) 270-1648. The examiner can normally be reached on M-F (1 1am-7: 
30pm) EST. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Tuan Q. Dam can be reached on (571) 272-3695. The 
fax phone number for the organization where this application or proceeding is 
assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
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system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). If you would like assistance from a USPTO Customer Service 
Representative or access to the automated information system, call 800-786- 
9199 (IN USA OR CANADA) or 571-272-1000. 
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